Traffic Trace Info
DumpFile: 201204010330.dump
FileSize: 1959.29MB
Id: 201204010330
StartTime: Sun Apr 1 03:30:00 2012
EndTime: Sun Apr 1 03:45:00 2012
TotalTime: 899.89 seconds
TotalCapSize: 1554.66MB CapLen: 96 bytes
# of packets: 26517823 (21176.42MB)
AvgRate: 197.41Mbps stddev:27.20M
IP flow (unique src/dst pair) Information
# of flows: 1810135 (avg. 14.65 pkts/flow)
Top 10 big flow size (bytes/total in %):
6.4% 5.4% 4.0% 3.8% 3.7% 3.1% 3.1% 2.3% 2.1% 1.9%
IP address Information
# of IPv4 addresses: 1388443
Top 10 bandwidth usage (bytes/total in %):
27.7% 15.1% 12.3% 6.7% 5.8% 5.6% 4.8% 4.1% 3.9% 3.7%
# of IPv6 addresses: 5694
Top 10 bandwidth usage (bytes/total in %):
28.9% 25.4% 22.5% 21.3% 17.8% 7.5% 5.4% 4.7% 3.6% 3.6%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201204010330.pktlen.png)
detailed numbers
[ 32- 63]: 3545745
[ 64- 127]: 6793595
[ 128- 255]: 1042789
[ 256- 511]: 511700
[ 512- 1023]: 689430
[ 1024- 2047]: 13934564
Protocol Breakdown
![[protocol breakdown chart]](201204010330.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 26517823 (100.00%) 22205085198 (100.00%) 837.36
ip 26275087 ( 99.08%) 22082410851 ( 99.45%) 840.43
tcp 20185212 ( 76.12%) 19939980175 ( 89.80%) 987.85
http(s) 10826644 ( 40.83%) 14752597577 ( 66.44%) 1362.62
http(c) 3932599 ( 14.83%) 699140758 ( 3.15%) 177.78
squid 62321 ( 0.24%) 46091189 ( 0.21%) 739.58
smtp 25453 ( 0.10%) 3730032 ( 0.02%) 146.55
ftp 11681 ( 0.04%) 1179414 ( 0.01%) 100.97
pop3 8268 ( 0.03%) 795813 ( 0.00%) 96.25
imap 785 ( 0.00%) 404003 ( 0.00%) 514.65
telnet 6094 ( 0.02%) 520118 ( 0.00%) 85.35
ssh 1452804 ( 5.48%) 1255235546 ( 5.65%) 864.01
dns 4440 ( 0.02%) 1477482 ( 0.01%) 332.77
bgp 623 ( 0.00%) 110235 ( 0.00%) 176.94
napster 37 ( 0.00%) 2674 ( 0.00%) 72.27
realaud 31 ( 0.00%) 2282 ( 0.00%) 73.61
rtsp 50 ( 0.00%) 3064 ( 0.00%) 61.28
icecast 689 ( 0.00%) 149357 ( 0.00%) 216.77
hotline 15 ( 0.00%) 1419 ( 0.00%) 94.60
other 3852678 ( 14.53%) 3178539212 ( 14.31%) 825.02
udp 2541882 ( 9.59%) 784536278 ( 3.53%) 308.64
dns 264434 ( 1.00%) 56115373 ( 0.25%) 212.21
realaud 2 ( 0.00%) 210 ( 0.00%) 105.00
halflif 23 ( 0.00%) 2783 ( 0.00%) 121.00
starcra 31 ( 0.00%) 3433 ( 0.00%) 110.74
everque 283 ( 0.00%) 55909 ( 0.00%) 197.56
unreal 105 ( 0.00%) 33630 ( 0.00%) 320.29
quake 9 ( 0.00%) 874 ( 0.00%) 97.11
cuseeme 2 ( 0.00%) 156 ( 0.00%) 78.00
other 2276710 ( 8.59%) 728205991 ( 3.28%) 319.85
icmp 1744175 ( 6.58%) 197719133 ( 0.89%) 113.36
ipip 184 ( 0.00%) 19160 ( 0.00%) 104.13
ipsec 2803 ( 0.01%) 976754 ( 0.00%) 348.47
ip6 1778526 ( 6.71%) 1156275474 ( 5.21%) 650.13
pim 341 ( 0.00%) 20460 ( 0.00%) 60.00
other 21964 ( 0.08%) 2883417 ( 0.01%) 131.28
frag 1312 ( 0.00%) 1177492 ( 0.01%) 897.48
ip6 242736 ( 0.92%) 122674347 ( 0.55%) 505.38
tcp6 140000 ( 0.53%) 71831438 ( 0.32%) 513.08
http(s) 27126 ( 0.10%) 38276076 ( 0.17%) 1411.05
http(c) 20974 ( 0.08%) 1844488 ( 0.01%) 87.94
smtp 69 ( 0.00%) 39428 ( 0.00%) 571.42
ftp 13154 ( 0.05%) 1321488 ( 0.01%) 100.46
dns 284 ( 0.00%) 55950 ( 0.00%) 197.01
bgp 85 ( 0.00%) 14933 ( 0.00%) 175.68
other 78308 ( 0.30%) 30279075 ( 0.14%) 386.67
udp6 70597 ( 0.27%) 46428425 ( 0.21%) 657.65
dns 34540 ( 0.13%) 7758044 ( 0.03%) 224.61
starcra 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 3 ( 0.00%) 317 ( 0.00%) 105.67
other 36053 ( 0.14%) 38669958 ( 0.17%) 1072.59
icmp6 31536 ( 0.12%) 3986335 ( 0.02%) 126.41
ip6 85 ( 0.00%) 11580 ( 0.00%) 136.24
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 488 ( 0.00%) 412489 ( 0.00%) 845.26
tcpdump file: 201204010330.dump.gz (604.12 MB)